added input to splunk cookbook